Resolved! Firepower DMZ ACP
Hello, I recently made a deployment and created only Inside--->Outside Access rules with file and intrusion policies. My question is should I also create Outside--->DMZ rules with IPS to prevent inbound attack?
Forum Posts
Is this right: According to the attached figure, there is no Network Discovery performed with a rule set for Monitor, even if the Network Discovery Policy included the subnet of the workstation involved in the connection? Thanks.
Resolved! Single Public IP on ASA Firewal
hi all, i just need a quick confirmation. i got a site that will use ASA 5525-X to PAT internal users to internet and establish a site-to-site IPSec VPN to HQ using a single public IP address on the WAN/outside interface. i usually get a /30 public W...
Hi All, I have nearly hundred of Static NAT mapping need to migrate to FTD (FMC). Because those NAT are one to one mapping, i have to create hundred of NAT rule in FMC? It's not difficult in ASA, but for FMC, I have to create hundred of objects and r...
Resolved! Connection events in FMC to view by Rule
Hi All, Is there a way to filter connections in FMC (Analysis > Connection > Events) so that you can view traffic/connection events per rule or ACL? Thanks, Shams
This is my first Cisco setup. Local workstations get ip address but cannot get out to the internet. Can someone look over my running config? Building configuration... Current configuration : 4318 bytes ! ! Last configuration change at 12:29:28 ...
Hi All Following the advisory detailed below does anyone at Cisco know if this affects FTD in passive mode? I presume it doesn't as it isn't actively managing the SIP connections however nothing is mentioned in the advisory. https://tools.cisco.com...
Hi I have some trouble creating a "trunk" on the ASA5506-x-w. On the old 5505 easy switchport trunk etc.. but on the 5506 with sub-interfacec, i have a hard time to get my setup working, (simple setup)and is a bit embarrassed that i have to ask for ...
Hi Folks, I have alot of dns failed/timeout messages from my firewall when its processing FQDN rules. These timeouts are always for low TTL sites, like ocws.officeapps.live.com for eg. I'm using the default dns expiry (1 minute). And I can lift this ...
Resolved! USB on ASA5585-X
Hi, folks.I know Cisco ASA5585-X support external USB as disk1, I have one ASA 5585-X SSP-40 running 9.1 but somehow it cannot recognize 8G FAT32 USB as disk1. Do I miss anything? thanks.Leo
NOTE: IP and other information posted has been changed from actual config... I have a firewall where ASDM put in the following statement when somebody was setting up/configuring the firewall. asdm location 192.168.0.0 255.255.255.0 outside Howe...
Resolved! Unable to launch ASDM
Seeking guidance since I have not been able to resolve this problem. I can SSH to the firewall without any problems. The firewall (ASA 5520) is currently running 8.4(3).3 and I've tried with ASDM images asdm-647.bin and asdm-781-150.bin # dir disk0...
Hey Guys, So I use an ASA FW 5515x. On this, I NAT'ed my Exchange Server out, specifying the ports also. More like a PAT. However, I am unable to ping the public IP (Outside Address) of the Exchange Server from outside. Traceroute works. Hits it. ...
Hi all, As per subject. Is it possible to GET the 'real' / hardware serial number for each managed device using the API? (From CLI you would get this with the "show inventory" command) My FMCs manages over 100 sensors so I would rather not do t...
Hi. I have some queries using the ASA 5506-x in transparent mode. I wish to use the ASA 5506-x within a specific subnet of our network, to isolate 3 devices, not the traditional firewalled, routed, internet access config in most examples I can find o...
